Privacy Policy

1. Introduction

Welcome to FluxFrame ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered video generation platform and services (collectively, the "Services").

FluxFrame is operated from the United Kingdom and complies with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other applicable data protection laws.

By using our Services, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access or use the Services.

2. Information We Collect

2.1 Information You Provide to Us

We collect information that you voluntarily provide when using our Services:

• Account Information: Name, email address, password, and billing information when you create an account.
• Payment Information: Credit card details and billing address processed securely through our payment processor (Stripe).
• Content You Upload: Product images and any related data you upload to generate videos.
• Communications: Information you provide when contacting our support team or responding to surveys.
• Profile Information: Any additional information you choose to add to your profile.

2.2 Information Collected Automatically

When you access our Services, we automatically collect certain information:

• Usage Data: Information about how you use our Services, including features accessed, videos generated, and time spent.
• Device Information: IP address, browser type, operating system, device identifiers, and mobile network information.
• Log Data: Server logs including access times, pages viewed, and system activity.
• Cookies and Similar Technologies: We use cookies, web beacons, and similar tracking technologies to collect information about your browsing activities.

2.3 Information from Third Parties

We may receive information from:

• Payment Processors: Transaction and payment status information from Stripe.
• Analytics Providers: Aggregated usage statistics and analytics data.
• Authentication Services: If you sign up using third-party authentication (e.g., Google, Microsoft).

3. How We Use Your Information

We use your information for the following purposes:

• Provide and Maintain Services: To deliver AI video generation services, process your uploads, and manage your account.
• Process Payments: To process transactions and send billing-related communications.
• Improve Our Services: To analyze usage patterns, identify bugs, and develop new features.
• Customer Support: To respond to your inquiries and provide technical assistance.
• Security and Fraud Prevention: To detect, prevent, and address technical issues, fraudulent activity, and security threats.
• Communications: To send service-related notifications, updates, and marketing communications (with your consent).
• Legal Compliance: To comply with applicable laws, regulations, and legal processes.
• AI Model Improvement: We do NOT use your uploaded content to train our AI models without your explicit consent.

4. Legal Basis for Processing (UK GDPR)

Under UK GDPR, we process your personal data based on the following legal grounds:

• Contractual Necessity: Processing is necessary to perform our contract with you (providing Services).
• Legitimate Interests: We have legitimate interests in improving our Services, preventing fraud, and ensuring security.
• Legal Obligation: We may process data to comply with legal requirements.
• Consent: Where required by law, we obtain your consent for specific processing activities (e.g., marketing communications).

5. How We Share Your Information

We may share your information in the following circumstances:

5.1 Service Providers

We share data with third-party vendors who perform services on our behalf:

• Payment Processing: Stripe (for payment processing)
• Cloud Hosting: Supabase and cloud storage providers (for data storage)
• AI Services: OpenAI and kie.ai (for video generation)
• Analytics: Service providers for usage analytics

5.2 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will provide notice before your information is transferred and becomes subject to a different privacy policy.

5.3 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., court orders, law enforcement).

5.4 With Your Consent

We may share your information for any other purpose with your consent.

6. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

• Account Data: Retained while your account is active and for a reasonable period thereafter for legal and business purposes.
• Uploaded Content: Product images and generated videos are retained according to your subscription plan and can be deleted by you at any time.
• Payment Records: Retained for 7 years as required by UK tax and accounting regulations.
• Usage Logs: Typically retained for 90 days unless needed for security or legal purposes.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction:

• Encryption of data in transit (TLS/SSL) and at rest
• Regular security assessments and penetration testing
• Access controls and authentication requirements
• Employee training on data protection
• Incident response procedures

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security.

8. Your Data Protection Rights (UK GDPR)

Under UK data protection law, you have the following rights:

• Right of Access: You have the right to request copies of your personal data.
• Right to Rectification: You can request correction of inaccurate or incomplete data.
• Right to Erasure: You can request deletion of your personal data in certain circumstances.
• Right to Restrict Processing: You can request that we limit how we use your data.
• Right to Data Portability: You can request a copy of your data in a structured, machine-readable format.
• Right to Object: You can object to our processing of your personal data in certain circumstances.
• Rights Related to Automated Decision-Making: You have rights regarding automated decision-making and profiling.
• Right to Withdraw Consent: Where processing is based on consent, you can withdraw it at any time.

To exercise any of these rights, please contact us at support@fluxframe.app. We will respond to your request within one month.

9. International Data Transfers

Your information may be transferred to and processed in countries other than the United Kingdom. When we transfer data outside the UK, we ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses approved by the UK Information Commissioner's Office (ICO)
• Adequacy decisions recognizing equivalent data protection standards
• Other legally approved transfer mechanisms

10. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to improve your experience:

• Essential Cookies: Necessary for the Services to function properly
• Analytics Cookies: Help us understand how you use our Services
• Preference Cookies: Remember your settings and preferences

You can control cookies through your browser settings. However, disabling certain cookies may affect the functionality of our Services. For more information, see our Cookie Policy.

11. Children's Privacy

Our Services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately, and we will take steps to delete such information.

12. Third-Party Links

Our Services may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:

• Posting the updated Privacy Policy on our website
• Sending you an email notification (for significant changes)
• Displaying a prominent notice within our Services

Your continued use of the Services after changes become effective constitutes acceptance of the revised Privacy Policy.

14. Contact Us and Complaints

If you have any questions, concerns, or complaints about this Privacy Policy or our data practices, please contact us at:

If you are not satisfied with our response, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO):

15. Definitions

• "Personal Data" means any information relating to an identified or identifiable natural person.
• "Processing" means any operation performed on personal data, including collection, storage, use, and deletion.
• "Data Controller" means FluxFrame, which determines the purposes and means of processing personal data.
• "Data Processor" means third-party service providers who process data on our behalf.